MUST READ. Threat actors actively exploit D-Link DIR-859 router flaw CVE-2024-0769.
Expert released PoC exploit code for Veeam Backup Enterprise Manager flaw CVE-2024-29849.
CISA adds D-Link DIR router flaws to its Known Exploited Vulnerabilities catalog.
Russia-linked APT28 used post-compromise tool GooseEgg to exploit CVE-2022-38028 Windows flaw.
Critical Fortinet's FortiClient EMS flaw actively exploited in the wild.
Threat actors actively exploit JetBrains TeamCity flaws to deliver malware.
PoC exploit for critical RCE flaw in Fortra FileCatalyst transfer tool released.
Threat actors exploit Ivanti VPN bugs to deploy KrustyLoader Malware.
Experts released PoC exploit for Fortra GoAnywhere MFT flaw CVE-2024-0204.
Threat actors exploit Apache ActiveMQ flaw to deliver the Godzilla Web Shell.
Threat actors breached US govt systems by exploiting Adobe ColdFusion flaw.
Threat actors started exploiting critical ownCloud flaw CVE-2023-49103.
Threat actors actively exploit F5 BIG-IP flaws CVE-2023-46747 and CVE-2023-46748.
Experts released PoC exploit code for Cisco IOS XE flaw CVE-2023-20198.
Experts released PoC exploit code for VMware Aria Operations for Logs flaw.
North Korea-linked APT groups actively exploit JetBrains TeamCity flaw.
Threat actors have been exploiting CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices since August.
WS FTP flaw CVE-2023-40044 actively exploited in the wild.
UNC4841 threat actors hacked US government email servers exploiting Barracuda ESG flaw.
Researchers released PoC exploit for Ivanti Sentry flaw CVE-2023-38035.
This Cyber News was published on securityaffairs.com. Publication date: Mon, 01 Jul 2024 08:13:07 +0000